CONTROL TRACEABILITY
Requirement-to-Evidence Traceability
A complete F-001 through F-019 chain without inferred completion or hidden gaps.Verified snapshot — GitHub not connected
MA
Live GitHub is not connected. Refresh can only revalidate the snapshot stamped 2026-08-27 23:26 UTC; it will not claim that unchanged data is live.
FULL CONTROL CHAIN
Requirement → Gap → Task → Session → PR → Test → Evidence → Status
IDRequirementGap / taskSessionPRTestEvidenceStatus
F-001Arabic provenance is visible and truthfulF001-CLOSESerialize provenance and disclose authorityC → D/F#404 base; successor requiredAPI round-trip + AR/EN refusalRow source semanticsACTIVE CLOSURE
F-002PDPL English is classified as translationF002-CLOSERecord source language and field provenanceF → CBlueprint then provenance PRManifest parity + signed reviewHuman linguistic/legal reviewQUEUED HUMAN REVIEW
F-003SAMA MVC/CRFR inclusion is evidence-basedF003-CLOSEProduce inclusion evidence before mappingF → CFuture decision/import PRAnatomy + source/hash + previewNo automatic inclusionQUEUED
F-004PCI-DSS matrix is not a frameworkF004-CLOSEClassify as governed version diffF → E/CFuture manifest PRClassification + negative importRefusal ruleQUEUED
F-005Seven toolkits land without semantic lossF005-CLOSEMap only after destinations existF → CBlocked on F-008/009/016Dry-run/diff + loss refusalPer-toolkit parityDEPENDENCY ORDERED
F-006Field/language provenance is granularF006-CLOSEExtend reviewed field metadataF → C → D#404 partial; successor requiredFour-column round-tripRevision historyACTIVE CLOSURE
F-007Authority/source identity is governedF007-CLOSEDefine identity after Gate AF → CFuture Gate A/migration PRCollision + idempotence refusalSource/version/hashQUEUED
F-008Global controls and tenant overlays differF008-CLOSEAdd catalog mapping and tenant overlayC → D/FPost-assessment PRImmutability + cross-tenant refusalNo automatic retro-linkQUEUED AFTER ASSESSMENT
F-009Evidence requirements/reuse are structuredF009-CLOSEAuthor freshness and reuse templatesC → D/FPost-assessment PRPermission + link-not-copyProvenance/freshnessQUEUED AFTER ASSESSMENT
F-010NDI 100.01% weights remain truthfulF010-CLOSESeparate official and derived totalsF → C/DFuture content/method PRExact total + normalized denominatorVisible disclosureQUEUED
F-011Publication validates content qualityF011-CLOSEAdvisory then reviewed blocking rulesF/E → C/DFuture staged PRsRule parity + fail-before caseAudited publish verdictQUEUED
F-012Duplicate SDAIA files are non-destructiveF012-CLOSERetain canonical and mark duplicateF/ENo deletion PR requiredHash + manifest validationDecision capturedRESOLVED NONDESTRUCTIVE
F-013Adoption/assessment use explicit pinsF013-CLOSEVersion and revision pin rulesC/E#392/#408No repin + history stabilityCanonical decisionRESOLVED IN PLAN
F-014Applicability has honest denominatorF014-CLOSEComplete scope/exclusion materializationC → D/F#408/#411 partialApplicability + retry/idempotenceHistorical scopePARTIAL AFTER 408
F-015Evidence metadata is audit-gradeF015-CLOSEAdd lifecycle metadata and rejectionC → DFuture additive PRVersion + cross-tenant refusalGate A firstQUEUED
F-016Reusable assessment execution existsF016-CLOSEComplete end-to-end lifecycleC → D/F#392/#408 partialQiyas-first tenant-hard suiteNo ungoverned scoringPARTIAL AFTER 408
F-017Tenant annotation does not mutate globalF017-CLOSEAdd tenant-owned pinned overlayC → DFuture PRImmutability + composite FKPermission refusalQUEUED
F-018Bulk changes are previewed and reversibleF018-CLOSEReuse dry-run transaction patternC → DFuture PRPreview + rollback + auditExplicit confirmationQUEUED
F-019NCA Anatomy rules are machine-readableF019-CLOSEGenerate governed parity manifestF/EFuture manifest PRParser↔manifest parityRefusal before publicationQUEUED
The register is a canonical plan checkpoint. Live GitHub is consulted first when connected; otherwise the source timestamp and snapshot warning remain visible.
Delivery sourcemeshal236/NexGen / NexGen
Plan sourceMaster Plan v2.3.0 · blob 67dc1f0
Last delivery verification2026-08-27 23:26 UTC
Data modeVerified snapshot — GitHub not connected